CVE-2022-3903: Medium severity Linux Linux kernel vulnerability
An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3903?
CVE-2022-3903 has a medium severity rating due to its capability to cause denial of service.
How do I fix CVE-2022-3903?
To fix CVE-2022-3903, update your Linux kernel to the latest version that addresses this vulnerability.
Which Linux kernel versions are affected by CVE-2022-3903?
CVE-2022-3903 affects vulnerable versions of the Linux kernel prior to the patched releases.
Can CVE-2022-3903 be exploited remotely?
CVE-2022-3903 requires local access to the system, as it is triggered by attaching a malicious USB device.
What are the potential impacts of CVE-2022-3903?
The impacts of CVE-2022-3903 include resource starvation leading to denial of service or potential system crashes.